3 ms·

How did you deal with these three customers, if that's not a secret? RE: your tidbit on "don't threaten bad actors with good time", I disagree. If you can brag

How did you deal with these three customers, if that's not a secret? RE: your tidbit on "don't threaten bad actors with good time", I disagree. If you can brag and demonstrate that their fleet of 10k machines can't touch a single service of yours and can't even make it pause then I'd say that sends pretty strong message to other potential bad actors. Those bad actors have to be discouraged. I would get a very nice ego trip if I knew I can show the finger to a state actor, metaphorically speaking. But again, they should get the message that they are not as dangerous as they think they are. Though I agree with other commenters that this traffic didn't seem as scary as the last 2-3 recorded attacks going through Cloudflare.

lukan 3y ago
"If you can brag and demonstrate that their fleet of 10k machines can't touch a single service of yours and can't even make it pause then I'd say that sends pretty strong message to other potential bad actors" It is also pretty good PR.
sspiff 3y ago
You seem to fundamentally misunderstand the mindset of these attackers. This can just be about a challenge or a show of capabilities on the side of the attacker. Telling them how big and strong you are will just trigger some of them to show you just how big and strong their botnet is. And there's always someone with a big enough botnet to bring you down.
- pdimitar 3y ago
  > Telling them how big and strong you are will just trigger some of them to show you just how big and strong their botnet is. And? Let them keep feeding more data to Cloudflare so they deflect them even easier next time around. Maybe I do misunderstand their motivation. But you seem to think they can knock down anyone they want. To me that's observably false; even the record-setting DDoS attack through (or on?) Cloudflare that was something like 1.6Tb/s didn't seem to do much. Let them flex. They provide us with valuable information for free. :)

lukan 3y ago

"If you can brag and demonstrate that their fleet of 10k machines can't touch a single service of yours and can't even make it pause then I'd say that sends pretty strong message to other potential bad actors" It is also pretty good PR.

sspiff 3y ago

You seem to fundamentally misunderstand the mindset of these attackers. This can just be about a challenge or a show of capabilities on the side of the attacker. Telling them how big and strong you are will just trigger some of them to show you just how big and strong their botnet is. And there's always someone with a big enough botnet to bring you down.

pdimitar 3y ago
> Telling them how big and strong you are will just trigger some of them to show you just how big and strong their botnet is. And? Let them keep feeding more data to Cloudflare so they deflect them even easier next time around. Maybe I do misunderstand their motivation. But you seem to think they can knock down anyone they want. To me that's observably false; even the record-setting DDoS attack through (or on?) Cloudflare that was something like 1.6Tb/s didn't seem to do much. Let them flex. They provide us with valuable information for free. :)